System Shop SQL Injection - Module aktkat=

vendor:

System Shop

by:

secret

N/A

CVSS

N/A

SQL Injection

CWE

Product Name: System Shop

Affected Version From: latest version

Affected Version To: latest version

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: XP / Linux

2010

System Shop SQL Injection – Module aktkat=

Simple Error Based / Normal SQL Injection in 'aktkat=' e.g. http://server/kn.php?aktkat=16 [SQL INJECTION] / columns vary..

Mitigation:

N/A

Source

Exploit-DB raw data:

  _____ ______ _____ _____  ______ _______ 
 / ____|  ____/ ____|  __ \|  ____|__   __|
| (___ | |__ | |    | |__) | |__     | |   
 \___ \|  __|| |    |  _  /|  __|    | |   
 ____) | |___| |____| | \ \| |____   | |   
|_____/|______\_____|_|  \_\______|  |_|   
                                           
                                           
# Exploit Title: System Shop SQL Injection - Module aktkat=
# Date: 12.09.2010
# Author: secret
# Software Link: www.system-shop.at
# Version: latest version
# Tested on: XP / Linux

#Dorks : inurl:"aktkat"  / "Powered by System Shop" / "System Shop" site:at

SQL Injection : 
===========================================================================================  

Simple Error Based / Normal SQL Injection in "aktkat="

e.g. http://server/kn.php?aktkat=16 [SQL INJECTION] / columns vary..

NOT FIXED - 12.09.2010

--------------------------------------------------------------------------------

Greetz to all brothers & sisters who are fighting for freedom in IRAN...

خدا شما کمک خواهد کرد

contact : secret_hf@hotmail.com